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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

1. (Currently Amended) An information recording device comprising: 

a memory unit containing data, including content data A [[[and]] a block permission 
table defining memory-access control information , and an integrity check value for the 
block permission table generated based on a memory unit identifier , the memory unit 
having a data storage area comprising a plurality of blocks, each of the blocks 
comprising M sectors from a first sector to a M-th sector with each sector having a 
predetermined data capacity, where M represents a natural number; 

a processing unit for dividing content data into separate content data portions, for 
storing each of the separate content data portions in a different sector within a first data 
block of the data storage area, and for storing a security header corresponding to the 
content data in a second data block of the data storage area; 

a cryptosystem unit for performing sector level encryption by using a different 
encryption key for each sector of the first data block to execute encryption processing 
on the content data portion to be stored in each of the sectors; and 

an integrity checking unit for checking the integrity of the block permission table 
based on the integrity check value generated based on a memory unit identifier , 

wherein the security header stored in the second data block includes each 
encryption key used for each sector of the first data block. 

2-4. (Cancelled). 
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5. (Previously Presented) An information recording device according to 
claim 1, wherein, in said cryptosystem unit, the encryption processing is executed as 
single-DES encryption processing using different encryption keys for each sector of the 
first data block. 

6. (Previously Presented) An information recording device according to 
claim 1, wherein, in said cryptosystem unit, the encryption processing is executed as 
triple-DES encryption processing using at least two different encryption keys for each 
sector of the first data block. 

7. (Cancelled). 

8. (Currently Amended) An information playback device comprising: 

a memory unit containing data, including encrypted content data i [[[and]] a block 
permission table defining memory-access control information , and an integrity check 
value for the block permission table generated based on a memory unit identifier , the 
memory unit having a data storage area comprising a plurality of blocks, each of the 
blocks comprising M sectors from a first sector to a M-th sector with each sector having 
a predetermined data capacity, where M represents a natural number; 

a processing unit for reading encrypted content data portions which together 
comprise encrypted content data, wherein each encrypted content data portion has 
been encrypted using a different encryption key and is read from a different sector 
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within a first data block of the data storage area, and for reading a security header 

corresponding to the encrypted content data from a second data block of the storage 

area; 

a cryptosystem unit for performing sector level decryption by using a different 
decryption key for each sector of the first data block to execute decryption processing 
on the read encrypted content data portions; and 

an integrity checking unit for checking the integrity of tjhe block permission table 
based on the integrity check value generated based on a mejmorv unit identifier , 

wherein the security header read from the second date block includes each 
encryption key used to encrypt each encrypted content data portion read from the first 
data block. 

9-11. (Cancelled). 

12. (Previously Presented) An information playback device according to claim 
8, wherein, in said cryptosystem unit, the decryption processing is executed as single- 
DES decryption processing using different decryption keys for each sector of the first 
data block. 

13. (Previously Presented) An information playback device according to claim 
8, wherein, in said cryptosystem unit, the decryption processing is executed as triple- 
DES decryption processing using at least two different decryption keys for each sector 
of the first data block. 
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14-16. (Cancelled). 

17. (Currently Amended) An information recording method comprising the 
following steps performed by a control unit: 

dividing content data into separate content data portions; 

storing the separate content data portions., [[[and]] a block permission table 
defining memory-access control information , and an integrity check value for the block 
permission table generated based on a medium identifier , to a memory medium having 
a data storage area comprising a plurality of blocks, each of the blocks comprising M 
sectors from a first sector to a M-th sector with each sector having a predetermined data 
capacity, where M represents a natural number, each content data portion is stored in a 
different sector within a first data block of the data storage area and the security header 
is stored in a second data block of the data storage area; 

encrypting, prior to storing, the content data portions by performing sector level 
encryption using a different encryption key for each sector of the first data block in 
which a content data portion will be stored; and 

performing an integrity check of the block permission table based on the integrity 
check value generated based on a medium identifier , 

wherein the security header stored in the second data block includes each 
encryption key used to encrypt each content data portion stored in the sectors of the 
first data block. 
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18-20. (Canceled). 

21. (Previously Presented) An information recording method according to 
claim 17, wherein encrypting is executed as single-DES encryption processing using 
different encryption keys each sector of the first data block. 

22. (Previously Presented) An information recording method according to 
claim 17, wherein encrypting is executed as triple-DES encryption processing using at 
least two different encryption keys for each sector of the first data block. 

23. (Cancelled). 

24. (Currently Amended) An information playback method comprising the 
following steps performed by a control unit: 

reading encrypted content data portions, which together comprise encrypted 
content data, a block permission table defining memory-access control information , an 
integrity check value for the block permission table generated based on a medium 
identifier , and a security header from a memory medium having a data storage area 
comprising a plurality of blocks, each of the blocks comprising M sectors from a first 
sector to a M-th sector with each sector having a predetermined data capacity, where M 
represents a natural number, each encrypted content data portion having been 
encrypted using a different encryption key and read from a different sector within a first 
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data block of the data storage area, and the security header read from a second data 
block of the data storage area; 

decrypting the content data portions stored in each of the sectors by performing 
sector level decryption by using a different decryption key for each sector of the first 
data block to execute decryption processing on the read encrypted content data 
portions; and 



performing an integrity check of the block permission jable based on the integrity 

check value generated based on a medium identifier . 

wherein the security header read from the second data block includes each 
encryption key used to encrypt each encrypted content data portion read from the first 
data block. 

25-27. (Cancelled). 

28. (Previously Presented) An information playback method according to 
claim 24, wherein the decryption processing is executed as single-DES decryption 
processing using different decryption keys each sector of the! first data block. 

29. (Previously Presented) An information playback method according to 
claim 24, wherein the decryption processing is executed as triple-DES decryption 
processing using at least two decryption keys for each sector of the first data block. 

30. (Cancelled). 
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31 . (Currently Amended) A computer-readable recording medium comprising 
a computer program product for performing, when executed by a processor, a data 
encryption method comprising: 

dividing content data into separate content data portions; 

storing the separate content data portions, a block permission table, an integrity 
check value for the block permission table generated based pn a memory unit identifier, 
and a security header in a memory unit having a data storage area comprising a 
plurality of blocks, each of the blocks comprising M sectors from a first sector to a M-th 
sector with each sector having a predetermined data capacity, where M represents a 
natural number, each content data portion being stored in a different sector within a first 
data block of the data storage area and the security header being stored in a second 
data block of the data storage area; 

encrypting, prior to storing, the content data portions by performing sector level 
encryption using a different encryption key for each sector of\ the first data block in 
which a content data portion will be stored; and 

checking the integrity of the revocation list and the blcjck permission table based 
on the integrity check value generated based on a memory unit identifier , 

wherein the security header stored in the second data block includes each 
encryption key used for each sector of the first data block. 
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32. (Currently Amended) A computer readable recording medium comprising 
a computer program product for performing, when executed by a processor, a data 
decryption method comprising: 

reading encrypted content data portions, which together comprise encrypted 
content data, a block permission table defining memory-access control information, an 
integrity check value for the block permission table generated based on a memory 



identifier, and a security header from a memory having a data storage area comprising 
a plurality of blocks, each of the blocks comprising M sectors from a first sector to a M- 
th sector with each sector having a predetermined data capacity, where M represents a 
natural number, each encrypted content data portion having been encrypted using a 
different encryption key and read from a different sector within a first data block of the 
data storage area, and the security header read from a second data block of the data 
storage area; 

decrypting the content data portions stored in each of the sectors by performing 
sector level decryption by using a different decryption key for each sector of the first 
data block to execute decryption processing on the read enciypted content data 
portions; and 

checking the integrity of the block permission table ba^ed on the integrity check 
value generated based on a memory identifier , 

wherein the security header read from the second data block includes each 
encryption key used to encrypt each encrypted content data portion read from the first 
data block. 
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